chore(deps): bump the actions group with 21 updates

.github/workflows/boj-build.yml

@@ -13,7 +13,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@v7.0.1
       - name: Trigger BoJ Server (Casket/ssg-mcp)
         run: |
           # Send a secure trigger to boj-server to build this repository

.github/workflows/cargo-audit.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v7.0.1
 
       - name: Install cargo-audit
         run: cargo install cargo-audit --locked
@@ -45,7 +45,7 @@ jobs:
     permissions:
       issues: write
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v7.0.1
 
       - name: Create vulnerability issue
         env:

.github/workflows/casket-pages.yml

@@ -24,22 +24,22 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v7.0.1
 
       - name: Checkout casket-ssg
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: hyperpolymath/casket-ssg
           path: .casket-ssg
 
       - name: Setup GHCup
-        uses: haskell-actions/setup@v2.7.5
+        uses: haskell-actions/setup@v2.12.1
         with:
           ghc-version: '9.8.2'
           cabal-version: '3.10'
 
       - name: Cache Cabal
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@v6.1.0
         with:
           path: |
             ~/.cabal/packages
@@ -101,10 +101,10 @@ jobs:
           touch ../_site/.nojekyll
 
       - name: Setup Pages
-        uses: actions/configure-pages@v5.0.0
+        uses: actions/configure-pages@v6.0.0
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3.0.1
+        uses: actions/upload-pages-artifact@v5.0.0
         with:
           path: '_site'
 
@@ -118,4 +118,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4.0.5
+        uses: actions/deploy-pages@v5.0.1

.github/workflows/codeql.yml

@@ -44,12 +44,12 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3
+        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3
+        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v3
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/dependabot-automerge.yml

@@ -58,7 +58,7 @@ jobs:
     steps:
       - name: Fetch Dependabot metadata
         id: meta
-        uses: dependabot/fetch-metadata@v2.2.0
+        uses: dependabot/fetch-metadata@v3.1.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/dogfood-gate.yml

@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.3.1
+        uses: actions/checkout@v7.0.1
 
       - name: Check for A2ML files
         id: detect
@@ -74,7 +74,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.3.1
+        uses: actions/checkout@v7.0.1
 
       - name: Check for K9 files
         id: detect
@@ -124,7 +124,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.3.1
+        uses: actions/checkout@v7.0.1
 
       - name: Scan for invisible characters
         id: lint
@@ -217,7 +217,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.3.1
+        uses: actions/checkout@v7.0.1
 
       - name: Check for Groove manifest
         id: groove
@@ -276,7 +276,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.3.1
+        uses: actions/checkout@v7.0.1
 
       - name: Check and validate eclexiaiser manifest
         id: eclex
@@ -342,7 +342,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.3.1
+        uses: actions/checkout@v7.0.1
 
       - name: Generate dogfooding scorecard
         run: |

.github/workflows/generator-generic-ossf-slsa3-publish.yml

@@ -32,7 +32,7 @@ jobs:
       digests: ${{ steps.hash.outputs.digests }}
 
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v7.0.1
 
       # ========================================================
       #
@@ -69,7 +69,7 @@ jobs:
       actions: read   # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@68bad40844440577b33778c9f29077a3388838e9 # v1.4.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0
     with:
       base64-subjects: "${{ needs.build.outputs.digests }}"
       upload-assets: true # Optional: Upload to a new release

.github/workflows/ghcr-publish.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
 
       - name: Install nerdctl and containerd
         run: |

.github/workflows/instant-sync.yml

@@ -20,7 +20,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Trigger Propagation
-        uses: peter-evans/repository-dispatch@v3.0.0
+        uses: peter-evans/repository-dispatch@v4.0.1
         with:
           token: ${{ secrets.FARM_DISPATCH_TOKEN }}
           repository: hyperpolymath/.git-private-farm

.github/workflows/pages.yml

@@ -22,9 +22,9 @@ jobs:
       image: ghcr.io/stefan-hoeck/idris2-pack@sha256:f0758996a931fb35d9ecb1de273c4d59dabe2a09b433afc7e357f65a08b7e1ff
     steps:
       - name: Checkout Site
-        uses: actions/checkout@v4.4.0
+        uses: actions/checkout@v7.0.1
       - name: Checkout Ddraig SSG
-        uses: actions/checkout@v4.4.0
+        uses: actions/checkout@v7.0.1
         with:
           repository: hyperpolymath/ddraig-ssg
           path: .ddraig-ssg
@@ -41,7 +41,7 @@ jobs:
           fi
           ./.ddraig-ssg/build/exec/ddraig build src _site https://hyperpolymath.github.io/${GITHUB_REPOSITORY#*/}
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3.0.1
+        uses: actions/upload-pages-artifact@v5.0.0
         with:
           path: '_site'
   deploy:
@@ -54,4 +54,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4.0.5
+        uses: actions/deploy-pages@v5.0.1

.github/workflows/publish-aur.yml

@@ -43,7 +43,7 @@ jobs:
 
       - name: Checkout bunsenite
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
 
       - name: Get inputs
         if: steps.check-secret.outputs.skip != 'true'
@@ -104,7 +104,7 @@ jobs:
 
       - name: Publish to AUR
         if: steps.check-secret.outputs.skip != 'true'
-        uses: KSXGitHub/github-actions-deploy-aur@v3.0.1
+        uses: KSXGitHub/github-actions-deploy-aur@v4.2.0
         with:
           pkgname: bunsenite-bin
           pkgbuild: aur-package/PKGBUILD

.github/workflows/publish-chocolatey.yml

@@ -41,7 +41,7 @@ jobs:
 
       - name: Checkout bunsenite
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
 
       - name: Get inputs
         if: steps.check-secret.outputs.skip != 'true'

.github/workflows/publish-container.yml

@@ -23,18 +23,18 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v7.0.1
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3.3.0
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5.5.1
+        uses: docker/metadata-action@v6.2.0
         with:
           images: ghcr.io/${{ github.repository }}
           tags: |
@@ -45,7 +45,7 @@ jobs:
 
       - name: Build and push
         id: push
-        uses: docker/build-push-action@v6.9.0
+        uses: docker/build-push-action@v7.4.0
         with:
           context: .
           file: ./Containerfile
@@ -54,7 +54,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Attest container provenance
-        uses: actions/attest-build-provenance@v2.4.0
+        uses: actions/attest-build-provenance@v4.2.2
         with:
           subject-name: ghcr.io/${{ github.repository }}
           subject-digest: ${{ steps.push.outputs.digest }}

.github/workflows/publish-copr.yml

@@ -83,7 +83,7 @@ jobs:
 
       - name: Checkout homebrew-tap
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: ${{ env.TAP_REPO }}
           token: ${{ secrets.TAP_GITHUB_TOKEN }}

.github/workflows/publish-debian-ppa.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Checkout bunsenite
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
 
       - name: Get inputs
         if: steps.check-secret.outputs.skip != 'true'

.github/workflows/publish-flatpak.yml

@@ -41,7 +41,7 @@ jobs:
 
       - name: Checkout homebrew-tap
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: ${{ env.TAP_REPO }}
           token: ${{ secrets.TAP_GITHUB_TOKEN }}

.github/workflows/publish-homebrew.yml

@@ -52,7 +52,7 @@ jobs:
 
       - name: Checkout homebrew-tap
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: ${{ env.TAP_REPO }}
           token: ${{ secrets.TAP_GITHUB_TOKEN }}

.github/workflows/publish-macports.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Checkout homebrew-tap
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: ${{ env.TAP_REPO }}
           token: ${{ secrets.TAP_GITHUB_TOKEN }}

.github/workflows/publish-nixpkgs.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Checkout homebrew-tap
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: ${{ env.TAP_REPO }}
           token: ${{ secrets.TAP_GITHUB_TOKEN }}

.github/workflows/publish-obs.yml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Checkout homebrew-tap
         if: steps.check-secret.outputs.skip != 'true'
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v7.0.1
         with:
           repository: ${{ env.TAP_REPO }}
           token: ${{ secrets.TAP_GITHUB_TOKEN }}